Setting the default firewall configuration (was Re: Attention, dependency fighters)

[Miloslav Trmač]

On Thu, Nov 15, 2012 at 7:08 PM, Reindl Harald <h.reindl at thelounge.net> wrote:
> Am 15.11.2012 19:02, schrieb Miloslav Trmač:
>> It would be very helpful for judging the maturity/suitability of
>> firewalld if you could try converting your iptables script to
>> firewall-cmd --direct (which, at least I hope, should be possible to
>> do with a few sed commands), and report back whether the pass-through
>> capability is good enough.
>
> you CAN NOT easily convert iptables.sh scripts containing
> hundrets of commands in a specific order which are well tested
> over years and your replacment for any hardware firewall/router

Have you actually _tried_?  It's supposed to be as easy as
s/iptables/firewall-cmd --direct --passthrough ipv4/

I don't know for a fact whether it is good enough.  You seem to have a
script that could tell us.
    Mirek